Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File: ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier: 0Tqm/FVw+KadKh0VghsePKI/ROxlcDBs/7WIyeEYv6Q=
Subject key identifier: 61:CC:EC:F0:C9:AD:B1:E8:27:71:CD:97:BC:A2:EA:8F:2D:BE:62:4D
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer: /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial: 0199FDD90435B08500B0BB102D1F1485B959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number: 1232
Signing time: Sun 19 Oct 2025 19:01:22 +0000
Manifest this update: Sun 19 Oct 2025 19:01:22 +0000
Manifest next update: Mon 20 Oct 2025 19:01:22 +0000
Files and hashes: 1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: H2jQ4QKvwKIjAKsXW5e6lTgwcBfSSN3Jg49UAekNfhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:04:35:b0:85:00:b0:bb:10:2d:1f:14:85:b9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Validity
Not Before: Oct 19 19:01:22 2025 GMT
Not After : Oct 20 19:01:22 2025 GMT
Subject: CN=61ccecf0c9adb1e82771cd97bca2ea8f2dbe624d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:a3:cc:92:a1:c2:63:dd:4c:a7:15:d3:75:
95:87:c4:b0:ff:ee:39:26:3b:6b:1c:ee:7e:1a:ff:
a2:a5:02:86:88:08:16:2a:1c:6d:e0:69:68:85:9e:
71:19:5f:48:9d:d1:73:68:ef:df:72:e6:ea:3f:61:
4a:18:c8:b8:a1:27:8a:49:a8:6d:36:07:1e:ee:ea:
07:11:87:0b:cc:60:b4:a5:b3:7b:1d:e6:e0:fa:d4:
93:4f:a1:f3:95:48:33:24:54:8c:61:e3:ee:9c:77:
66:19:ca:0c:4a:51:73:98:ac:bc:48:71:42:4c:93:
56:7d:1c:cd:43:73:81:c0:bd:19:68:50:e4:94:69:
fa:c8:7f:c6:44:af:b2:79:b8:b4:ff:5d:6c:21:e1:
af:6a:d4:0b:06:1a:0b:2f:bb:f0:7c:cc:87:bc:83:
44:2c:45:7d:03:44:d2:dd:ed:6c:e5:51:63:67:e3:
91:6f:f3:f0:a8:c7:95:2b:36:a8:a8:63:23:a7:71:
dd:e9:a8:be:28:04:0e:7d:ff:ce:1c:fb:4f:0a:f2:
f8:f6:82:6b:f3:31:3e:08:69:c7:76:98:94:ee:51:
b4:42:8e:af:fe:f8:a4:5c:04:d2:0d:dd:85:f3:a7:
e0:f6:4d:5e:89:34:36:f6:3e:ab:43:71:ef:1e:a9:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:EC:F0:C9:AD:B1:E8:27:71:CD:97:BC:A2:EA:8F:2D:BE:62:4D
X509v3 Authority Key Identifier:
keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:82:2b:12:3c:56:72:a8:29:b3:f2:e4:4b:4a:13:e0:a8:44:
67:26:5b:ae:f5:6b:31:64:d3:e0:05:4b:97:d9:bf:af:49:c1:
c3:09:f2:77:e8:42:02:6a:31:d5:22:86:50:2f:07:3f:12:44:
9a:28:bf:84:63:fe:11:f4:41:43:4e:7d:97:41:fc:87:01:20:
15:2a:c2:90:e2:3d:fb:8a:de:73:b0:cc:67:73:27:b0:59:59:
29:0e:43:70:28:22:35:0f:22:42:1e:47:e2:78:5a:5a:4e:c8:
b9:f5:bc:e8:de:b3:82:a9:b5:31:98:35:4b:ca:2f:29:ff:5f:
32:8c:df:d7:32:d2:98:e2:b2:c4:61:9b:9a:d7:f2:31:bf:cd:
76:a9:37:e1:fa:22:ef:03:d0:39:46:c6:be:3e:69:a6:d0:02:
5b:ba:b0:69:24:13:78:7d:fc:f3:82:4b:fd:59:6d:73:21:b9:
53:23:90:6f:83:d2:da:db:e8:55:17:78:ab:43:99:68:09:9d:
08:43:bb:39:e1:fa:a2:a4:fe:42:b2:d8:2d:70:25:b0:c9:6f:
89:6d:0d:68:60:18:15:79:f6:b4:3f:a5:2d:56:e6:51:f4:38:
39:1c:57:a3:80:76:aa:06:1d:ff:e2:14:5f:54:de:b3:8e:57:
1c:86:63:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:21 2025 by rpki-client